This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/olVKrDWOXV-cZqa6YCvyS1EAmtw.roa File: olVKrDWOXV-cZqa6YCvyS1EAmtw.roa (raw, json) Hash identifier: DtRokaXbwlYUqcYONE6Ad45+vRoun3fYTMXSmpbmsOQ= Subject key identifier: A2:55:4A:AC:35:8E:5D:5F:9C:66:A6:BA:60:2B:F2:4B:51:00:9A:DC Certificate issuer: /CN=1ed3d8e29e063b9d2740ab3de6c72255ec8d0557 Certificate serial: 019B7B362A6102F55043C0E88E46D07501FC Authority key identifier: 1E:D3:D8:E2:9E:06:3B:9D:27:40:AB:3D:E6:C7:22:55:EC:8D:05:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/olVKrDWOXV-cZqa6YCvyS1EAmtw.roa Signing time: Thu 01 Jan 2026 20:18:25 +0000 ROA not before: Thu 01 Jan 2026 20:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5400 IP address blocks: 62.5.0.0/17 maxlen: 17 62.102.0.0/17 maxlen: 17 62.134.0.0/16 maxlen: 16 62.173.192.0/18 maxlen: 18 62.180.0.0/16 maxlen: 16 82.150.0.0/19 maxlen: 19 185.94.0.0/22 maxlen: 22 194.213.64.0/19 maxlen: 19 195.90.64.0/19 maxlen: 19 195.100.0.0/16 maxlen: 16 195.163.0.0/16 maxlen: 16 195.182.96.0/19 maxlen: 19 212.8.160.0/19 maxlen: 19 212.21.192.0/19 maxlen: 19 212.31.192.0/19 maxlen: 19 212.41.128.0/19 maxlen: 19 212.108.0.0/19 maxlen: 19 212.127.0.0/19 maxlen: 19 212.162.192.0/18 maxlen: 18 213.15.0.0/16 maxlen: 16 213.137.160.0/19 maxlen: 19 213.194.0.0/18 maxlen: 18 213.236.64.0/18 maxlen: 18 2001:740::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.crl rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:2a:61:02:f5:50:43:c0:e8:8e:46:d0:75:01:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ed3d8e29e063b9d2740ab3de6c72255ec8d0557 Validity Not Before: Jan 1 20:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a2554aac358e5d5f9c66a6ba602bf24b51009adc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:45:b6:8a:4b:87:e8:74:e3:3a:5a:38:2f:a9: c7:c3:5c:3b:b7:13:02:96:9a:b7:27:98:98:c7:b5: 1d:b8:29:8f:75:6f:3b:90:74:f9:bb:75:49:f7:92: 3d:27:f7:2e:98:fd:2c:c3:41:7c:9a:05:c4:a5:b9: 75:27:06:20:07:21:a9:05:03:8d:8e:92:91:28:53: 34:d4:2b:d8:0d:37:80:ae:58:be:d2:2b:fa:74:b8: 30:14:48:33:f0:b1:4e:35:c2:37:d5:0b:a7:b9:ab: 7c:3c:16:77:49:8a:ac:c3:47:e7:3d:a9:8b:2f:34: e6:27:8e:36:92:8b:e9:c1:63:1e:0d:77:a4:bd:be: b7:eb:69:cf:37:73:57:74:fb:d8:f3:ee:5d:57:f6: 0f:81:36:20:3e:80:c7:5e:a7:7d:92:e6:b1:73:99: 02:36:5d:7c:7c:83:04:de:58:83:90:c1:48:e6:bc: b7:f1:8e:86:08:9b:2b:97:47:9f:4e:11:4f:45:52: 96:e6:14:b8:71:33:38:eb:0d:b8:8e:e2:88:32:fc: ad:0a:7d:a7:05:00:bf:86:68:f7:e1:64:15:35:78: f4:cd:22:4b:d8:5b:85:12:04:79:54:cd:cb:f8:c1: fd:ba:63:23:9b:e8:95:70:be:03:09:12:6b:e9:1f: 94:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:55:4A:AC:35:8E:5D:5F:9C:66:A6:BA:60:2B:F2:4B:51:00:9A:DC X509v3 Authority Key Identifier: keyid:1E:D3:D8:E2:9E:06:3B:9D:27:40:AB:3D:E6:C7:22:55:EC:8D:05:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/olVKrDWOXV-cZqa6YCvyS1EAmtw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.5.0.0/17 62.102.0.0/17 62.134.0.0/16 62.173.192.0/18 62.180.0.0/16 82.150.0.0/19 185.94.0.0/22 194.213.64.0/19 195.90.64.0/19 195.100.0.0/16 195.163.0.0/16 195.182.96.0/19 212.8.160.0/19 212.21.192.0/19 212.31.192.0/19 212.41.128.0/19 212.108.0.0/19 212.127.0.0/19 212.162.192.0/18 213.15.0.0/16 213.137.160.0/19 213.194.0.0/18 213.236.64.0/18 IPv6: 2001:740::/32 Signature Algorithm: sha256WithRSAEncryption 85:93:c2:02:78:23:49:5b:e7:26:67:cc:be:59:65:10:94:b3: 0c:3e:f2:85:83:69:01:70:a0:5c:8c:8c:e7:8e:66:24:9f:c9: cf:b9:d4:e7:e1:0e:52:f1:cd:99:04:26:19:6c:de:f3:76:70: 03:72:f4:65:7b:f7:c5:88:c8:72:78:d7:fe:e0:f8:e3:83:bb: ba:a5:5c:dc:c8:9c:68:c0:61:c6:e7:f5:46:1b:77:4a:9e:c8: 22:63:ea:e6:20:52:2e:de:4c:e0:da:ee:1d:fc:3a:66:da:26: 2c:a2:70:d5:11:84:49:e5:04:39:7c:f8:ee:a5:c5:95:de:f0: 89:1a:29:2e:1c:54:b2:4f:b7:13:ba:b5:7f:14:87:56:c9:b0: ba:13:b7:f4:fe:96:a1:c9:9b:09:17:66:23:e3:95:8f:c8:e2: 04:36:f1:bd:de:f3:46:43:c8:0a:90:83:45:44:b4:82:e9:3c: 20:87:2c:5f:4b:7c:6e:d5:99:76:1a:d2:f7:bd:31:22:0e:a0: 33:88:ab:ee:bc:41:9a:3e:72:c3:0d:e5:2d:19:ca:4a:74:dc: e9:7c:a1:72:6c:b5:3c:16:c4:a7:e6:17:2d:df:b4:bd:1d:c5: 96:29:58:e4:21:cf:b2:64:92:b2:9c:73:f4:6f:f4:b7:4f:79: 5d:ec:a8:1d -----BEGIN CERTIFICATE----- MIIFkDCCBHigAwIBAgISAZt7NiphAvVQQ8DojkbQdQH8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlZDNkOGUyOWUwNjNiOWQyNzQwYWIzZGU2YzcyMjU1ZWM4 ZDA1NTcwHhcNMjYwMTAxMjAxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjU1NGFhYzM1OGU1ZDVmOWM2NmE2YmE2MDJiZjI0YjUxMDA5YWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUW2ikuH6HTjOlo4L6nHw1w7txMC lpq3J5iYx7UduCmPdW87kHT5u3VJ95I9J/cumP0sw0F8mgXEpbl1JwYgByGpBQON jpKRKFM01CvYDTeArli+0iv6dLgwFEgz8LFONcI31Qunuat8PBZ3SYqsw0fnPamL LzTmJ442kovpwWMeDXekvb6362nPN3NXdPvY8+5dV/YPgTYgPoDHXqd9kuaxc5kC Nl18fIME3liDkMFI5ry38Y6GCJsrl0efThFPRVKW5hS4cTM46w24juKIMvytCn2n BQC/hmj34WQVNXj0zSJL2FuFEgR5VM3L+MH9umMjm+iVcL4DCRJr6R+UfQIDAQAB o4ICnDCCApgwHQYDVR0OBBYEFKJVSqw1jl1fnGamumAr8ktRAJrcMB8GA1UdIwQY MBaAFB7T2OKeBjudJ0CrPebHIlXsjQVXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHRQWTRwNEdPNTBuUUtzOTVzY2lWZXlOQlZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi80ZDljODMtZjk2MC00OGFjLWJiZjUt OWRjYTVjYzgwZGQ5LzEvb2xWS3JEV09YVi1jWnFhNllDdnlTMUVBbXR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi80ZDljODMtZjk2MC00OGFjLWJiZjUtOWRjYTVjYzgwZGQ5 LzEvSHRQWTRwNEdPNTBuUUtzOTVzY2lWZXlOQlZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGxBggrBgEFBQcBBwEB/wSBoTCBnjCBjAQCAAEwgYUDBAc+ BQADBAc+ZgADAwA+hgMEBj6twAMDAD60AwQFUpYAAwQCuV4AAwQFwtVAAwQFw1pA AwMAw2QDAwDDowMEBcO2YAMEBdQIoAMEBdQVwAMEBdQfwAMEBdQpgAMEBdRsAAME BdR/AAMEBtSiwAMDANUPAwQF1YmgAwQG1cIAAwQG1exAMA0EAgACMAcDBQAgAQdA MA0GCSqGSIb3DQEBCwUAA4IBAQCFk8ICeCNJW+cmZ8y+WWUQlLMMPvKFg2kBcKBc jIznjmYkn8nPudTn4Q5S8c2ZBCYZbN7zdnADcvRle/fFiMhyeNf+4Pjjg7u6pVzc yJxowGHG5/VGG3dKnsgiY+rmIFIu3kzg2u4d/Dpm2iYsonDVEYRJ5QQ5fPjupcWV 3vCJGikuHFSyT7cTurV/FIdWybC6E7f0/pahyZsJF2Yj45WPyOIENvG93vNGQ8gK kINFRLSC6TwghyxfS3xu1Zl2GtL3vTEiDqAziKvuvEGaPnLDDeUtGcpKdNzpfKFy bLU8FsSn5hct37S9HcWWKVjkIc+yZJKynHP0b/S3T3ld7Kgd -----END CERTIFICATE-----Generated at Sun Jan 25 10:20:01 2026 by rpki-client